CVE-2026-93799

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-93799

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93799.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-93799

Downstream

Published

2026-09-24T16:02:32Z

Modified

2026-10-05T02:31:03Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

wifi: iwlwifi: mvm: validate sta_id in BA window status notif

Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: validate sta_id in BA window status notif

BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from the firmware notification and uses it to index fw_id_to_mac_id[] without bounds checking. Validate sta_id before array access to prevent out-of-bounds indexing.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93799.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

3af512d6aac7eb6420086f124abb4426f5f4b369

Fixed

f9938eb95e2ddab4a58d3946a320abcbd60b56a4

Fixed

bb08fbbbd5568d33069485ecb0a1657f115a4e9f

Fixed

e35ae757c6462bfd3437bf58121bb721fe1f790c

Fixed

6aa77efaea9efea92e3090c35ad348fd759a3cf3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93799.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.6.0

Fixed

6.6.158

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.111

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.53

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93799.json"